Microsoft Entra (Azure AD)

  Dear Microsoft Entra friends,   In this article I would like to take a closer look at the subject of certificate affinity binding. So that even more security can…

  Dear Microsoft Entra friends,   In this article I would like to take a closer look at the subject of certificate affinity binding. So that even more security can…

I'm struggling with finding my data in AAD.  We've been running Azure Connect for years to bring the data from our on-prem AD over to our AAD instance.  Back last…

I'm struggling with finding my data in AAD.  We've been running Azure Connect for years to bring the data from our on-prem AD over to our AAD instance.  Back last…

Microsoft has recently introduced a range of new security tools and features for the Microsoft Entra product family, aimed at helping organizations to improve their security posture. With the ever-increasing…

Microsoft has recently introduced a range of new security tools and features for the Microsoft Entra product family, aimed at helping organizations to improve their security posture. With the ever-increasing…

Hi,   We want to use entra id as an OIDC provider to log in users to our applications. However, our use case requires that when users log in (on…

Hi,   We want to use entra id as an OIDC provider to log in users to our applications. However, our use case requires that when users log in (on…

  Dear Microsoft Entra Friends,   What is your experience with the device filter in the conditional access policies (Microsoft Entra ID)? The values of the attributes are not correct…

  Dear Microsoft Entra Friends,   What is your experience with the device filter in the conditional access policies (Microsoft Entra ID)? The values of the attributes are not correct…

Currently, enabling self-service password reset (SSPR) registration enforcement causes the app 'Microsoft App Access Panel' to be added to the login flow of users who have SSPR enabled. This app…

Currently, enabling self-service password reset (SSPR) registration enforcement causes the app 'Microsoft App Access Panel' to be added to the login flow of users who have SSPR enabled. This app…

So, our business is a hybrid AD/AAD site. We also use Office 365 and enforce MFA thru Authenticator to login to Microsoft applications (but not the PC itself, we still…

So, our business is a hybrid AD/AAD site. We also use Office 365 and enforce MFA thru Authenticator to login to Microsoft applications (but not the PC itself, we still…

Hello,   customer has an onprem virtual Windows 2019 RDS which is hybrid azure ad-joined.    When users connect to RDS with Windows Hello fingerprint or PIN, they dont get…

Hello,   customer has an onprem virtual Windows 2019 RDS which is hybrid azure ad-joined.    When users connect to RDS with Windows Hello fingerprint or PIN, they dont get…

Trying to get an access_token and refresh_token in. For this I am doing an oauth2 call with help of https://login.microsoftonline.com/{{ Tenant-ID }}/oauth2/v2.0/authorize?...... and where the response_type is code. With help of the CODE the…

Trying to get an access_token and refresh_token in. For this I am doing an oauth2 call with help of https://login.microsoftonline.com/{{ Tenant-ID }}/oauth2/v2.0/authorize?...... and where the response_type is code. With help of the CODE the…

As the holiday season approaches, businesses and organizations should brace for an increase in Distributed Denial of Service (DDoS) attacks. Historically, this period has seen a spike in such attacks,…

As the holiday season approaches, businesses and organizations should brace for an increase in Distributed Denial of Service (DDoS) attacks. Historically, this period has seen a spike in such attacks,…

Getting this exception on signup. Signin logs show Interrupted (KMSI) and Success. No condition policy applied. Logging in in new window doesn't cause the issue, only first sign up.  …

Getting this exception on signup. Signin logs show Interrupted (KMSI) and Success. No condition policy applied. Logging in in new window doesn't cause the issue, only first sign up.  …

The goal of this post is to find a way to allow specific external users to send an email message to a Group. I wish to do this via whitelist:…

The goal of this post is to find a way to allow specific external users to send an email message to a Group. I wish to do this via whitelist:…

Hi,   We run into an issue from time to time where we share something via OneDrive/SharePoint with a guest user and that users email address is associated with a…

Hi,   We run into an issue from time to time where we share something via OneDrive/SharePoint with a guest user and that users email address is associated with a…

I have a PowerShell script that I use to extract a csv details from Entra.   I would like to do this on a schedule.  However as the admin account uses…

I have a PowerShell script that I use to extract a csv details from Entra.   I would like to do this on a schedule.  However as the admin account uses…

On the Security Score dashboard, I have a recommendation: Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative usersDescriptionForcing a time out for MFA will help…

On the Security Score dashboard, I have a recommendation: Ensure Sign-in frequency is enabled and browser sessions are not persistent for Administrative usersDescriptionForcing a time out for MFA will help…

Hi Team,   I have done the integration between Azure Entra ID and ServiceNow in my personal instance. This is for pushing all the user & group data from Azure…

Hi Team,   I have done the integration between Azure Entra ID and ServiceNow in my personal instance. This is for pushing all the user & group data from Azure…

Everything we’re adding to Microsoft Entra is designed to help you stay ahead of the evolving threat landscape. It all comes down to one principle: make it easier for you to stay…

Everything we’re adding to Microsoft Entra is designed to help you stay ahead of the evolving threat landscape. It all comes down to one principle: make it easier for you to stay…

I'm getting conflicting info about SAML SSO.  We have a mixture of Microsoft 365 Business Standard and Business Basic users.  No one has Azure AD/Entra ID P1 licenses.  Is P1…

I'm getting conflicting info about SAML SSO.  We have a mixture of Microsoft 365 Business Standard and Business Basic users.  No one has Azure AD/Entra ID P1 licenses.  Is P1…

Hi, I have created the AzureAD Access Package for external guest users. Created a catalog Added two resources to the catalog AAD security group for my external users ServiceNow SSO…

Hi, I have created the AzureAD Access Package for external guest users. Created a catalog Added two resources to the catalog AAD security group for my external users ServiceNow SSO…

I have been receiving Admin alerts from Microsoft stating: "We've detected users in your tenant may have had email messages unexpectedly deleted by the Yahoo mail app". The recommended action is…

Good morning.  We aquired a company and federated with their domain.  We have an AAD connect client that is syncronizing ours and their domain to our M365 tenant.  We are…

  Dear Microsoft Entra ID Friends:   This article is about collecting information with the AzureADRecon tool. We use this information to investigate a hypothesis and start the hunt with…

Hello,In user sign-ins (non-interactive), we have several failed connection attempts every day.Authentication requirement Single-factor authenticationStatus FailureFailure reason Error validating credentials due to invalid username or password.Additional Details The user didn't enter the right credentials.…

Could anyone point me in the right direction to export a CSV of last login date/time for Guest users on Entra/Azure AD?   I can see the data in Entra…

Hello Smart people, I have a Active Directory domain to be synced with Entra ID. This Entra ID tenancy though, is already exists and users are created.    There are…

Microsoft invested time & money to introduce Passkeys in Windows 11 23H2, as it should. Unfortunately, it defaults to a mobile device (iPhone, iPad or Android device) everytime you try to log…

Microsoft Ignite runs from November 15 – 17, 2023! We’re looking forward to you joining us online starting at 9:00 AM PDT for the global digital sessions. Even though the in-person…

It's been repeatedly emphasized the importance of multifactor authentication (MFA) and emphasized that not all MFA is equal – the Authenticator is much more secure than phone authentication (so hang up!). Through the…

New blog post: RDP Private Resources using Microsoft Entra Private Access - Quick Access    RDP Private Resources using Microsoft Entra Private Access - Quick Access | LinkedIn    

  Dear Microsoft Entra ID Friends,   In this article, we take a closer look at Microsoft Entra ID continuous access evaluation.   What is Microsoft Entra ID Continuous access…

Hi Everyone,    I have a small on-premises exchange server 2016 setup which we're planning to make Hybrid. We do have a O365 environment (Business Standard Licensed) which is independent…